Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32332d3233203d3e20323632343835.roa
File:                     3137302e3233382e3137322e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          RKiLhdIeofVWC87MMDHLX/FbiKSmZo0EMRRyIExAZ/E=
Subject key identifier:   94:39:F6:D4:BE:61:D7:E5:CD:B7:AB:62:CA:A2:20:D3:53:1D:5B:7D
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       38FA58A6083356E0611D75EF52D83B3CE400CD54
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32332d3233203d3e20323632343835.roa
Signing time:             Sat 30 May 2026 21:56:54 +0000
ROA not before:           Sat 30 May 2026 21:51:54 +0000
ROA not after:            Sat 29 May 2027 21:56:54 +0000
asID:                     262485
IP address blocks:        170.238.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fa:58:a6:08:33:56:e0:61:1d:75:ef:52:d8:3b:3c:e4:00:cd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: May 30 21:51:54 2026 GMT
            Not After : May 29 21:56:54 2027 GMT
        Subject: CN=9439F6D4BE61D7E5CDB7AB62CAA220D3531D5B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:cc:96:c9:b1:c6:20:b8:d6:11:88:08:31:
                    0f:fd:92:e2:b5:d6:87:af:bf:93:a5:c1:b8:95:d9:
                    a5:b7:28:db:b5:11:84:49:06:36:eb:fe:31:3c:77:
                    c8:8a:11:56:dc:53:8c:17:a3:46:20:45:49:28:1b:
                    a3:fb:73:e4:5e:8b:1e:c3:fa:fa:9b:f6:da:b0:d6:
                    57:48:55:40:96:6a:c2:33:de:c3:d7:a3:92:f6:cc:
                    50:52:ea:08:e4:69:ea:2e:a4:73:d9:bc:a6:a3:49:
                    d8:f4:15:3d:fa:bf:8a:21:d1:32:0d:9e:91:40:f9:
                    c8:22:1b:40:14:8a:fb:22:3b:7c:e0:0b:11:ae:60:
                    94:b3:dd:5c:e5:6a:da:e2:a3:77:1f:9c:01:46:29:
                    7a:db:9a:ba:26:f7:79:a2:8a:70:64:17:7e:11:d8:
                    0a:42:e6:68:6d:5c:c2:aa:19:7d:ff:51:9c:c9:ac:
                    9f:6c:ab:49:bd:b2:3a:34:9a:86:88:91:a2:f8:02:
                    f2:cb:64:94:49:6d:92:7c:57:10:b0:84:c0:15:ba:
                    b5:81:0d:17:7f:49:8a:9c:52:30:40:10:c4:50:8e:
                    e2:7c:2a:6c:ea:bf:d1:35:62:69:2a:7c:37:a4:5c:
                    c9:fc:ef:60:39:66:5d:ad:1d:3c:d1:9e:cc:52:9f:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:39:F6:D4:BE:61:D7:E5:CD:B7:AB:62:CA:A2:20:D3:53:1D:5B:7D
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:27:c3:f2:17:90:ce:96:13:c2:e5:b5:78:e7:34:85:20:
         81:8a:7f:bd:1d:60:53:c3:2b:57:93:3d:de:1f:91:38:4d:50:
         82:1f:36:68:bd:71:14:3c:7e:09:17:b7:d1:c8:37:9e:3e:1d:
         b1:d7:b1:50:b2:a7:56:02:85:65:e4:29:63:0b:46:5e:31:ce:
         5c:0a:2e:8d:5d:4c:ca:fb:e9:cc:1e:2d:78:84:8e:8f:4e:73:
         ad:35:d0:c0:76:38:95:25:09:4e:13:5a:1e:11:d8:31:57:62:
         a4:84:37:67:08:cc:8a:36:51:be:83:1f:77:b2:2b:9f:5f:60:
         9e:22:33:c9:10:87:bc:89:dd:bb:81:1f:b8:ba:f0:97:73:c0:
         74:60:d3:b6:96:37:0d:7a:26:31:62:ad:99:15:e6:49:a5:8d:
         ec:2f:3a:26:e1:a1:91:1a:ec:fd:bc:43:fc:3d:98:2e:31:9e:
         1c:c3:58:7e:2f:8f:ce:09:a2:98:d0:cf:9b:9b:eb:39:36:ab:
         76:10:fd:9f:b3:a3:6a:46:e8:a2:95:1d:ec:a6:a0:ac:66:e3:
         5f:ec:0e:89:4b:01:4d:a4:0f:12:c9:21:90:98:9d:14:c4:a5:
         ca:9c:13:9b:00:9f:81:50:56:9b:0e:b4:5a:66:0b:76:42:ce:
         47:5d:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:05:06 2026 by rpki-client